MD5 has a digest size of 128 bits but has long been discouraged.

Is there an alternative algorithm with 128 bit digest size which is still considered secure?

  • 5
    $\begingroup$ Near cuplicate of What is the recommended replacement for MD5?, where my answer discusses repalcement with a 128-bit hash. $\endgroup$
    – fgrieu
    Mar 20 '17 at 10:46
  • $\begingroup$ TL;DR: No. A 128-bit hash requires 2^64 attempts to find a collision. This is within the means of big organisations today. 256-bit hashes should be fine the next 50 years if hardware development is no faster than Moore's law, and if no weaknesses are found in the algorithm. $\endgroup$
    – Ole Tange
    Mar 21 '17 at 10:47

Browse other questions tagged or ask your own question.